Is My Data Exposed If I Make Call to My Data From Client Side?

Hi, I have a security concern, maybe a stupid question but: is my data exposed if I make call to my dataset from front-end from client side?

Hi! is your dataset public or private?

If you are displaying it to the public then it is public

they're public, but if I don't have the host listed in CORS Origins, should I worry about someone pulling my data?

If the host is not listed in CORS Origins, your data cannot be pulled from client-side, but they can be easily pulled from server-side (or from client-side via a proxy). But as long as you're not storing confidential or gated/paid content, I wouldn't worry too much about it.

another way to think about it is: all information you display on a public website are scrapable and therefore public anyways. You are just making it a little easier for those bots that are going to show up anyways 🤖

Bots will ignore CORS, it's up to the HTTP client to enforce it.